ThreatAnalyzer

What ThreatAnalyzer is

ThreatAnalyzer is an automated malware analysis sandbox from VIPRE Security Group, the provider identified as a Ziff Davis subsidiary. It supports synchronous and asynchronous analysis, with a REST API for workflow automation. Analysts can create YARA rules that inspect file and runtime behavior, adjust detection rules, and control detonation through Python and C-based SDKs. Detection combines static analysis, patented AI and machine-learning engines, integrated intrusion detection and IoC scanning, and Threat Intelligence. Smart execution tracking, noise reduction, and anti-evasion techniques accompany artifacts ranging from kernel-mode information to web traffic. URL analysis runs in an isolated sandbox, using a real operating-system look and feel. Deployment can use managed or customer-managed GCP instances, on-premises systems, custom software installation, or Docker containers. The ThreatIQ feed draws from the company sensor network, open-source feeds, 78 industry partners, the dark web, and 6.5 million VIPRE endpoints. Optional raw files, packet captures, and reports support advanced investigations. Pricing is on request.